[pfx] Re: www.postfix.org certificate expired

2023-04-24 Thread raf via Postfix-users
On Sat, Apr 22, 2023 at 11:25:14AM -0400, Viktor Dukhovni via Postfix-users wrote: > On Sat, Apr 22, 2023 at 01:08:06PM +0200, Matus UHLAR - fantomas via > Postfix-users wrote: > > > >You should set a POST_HOOK in certbot renew (assuming you're using > > >certbot, that is) that restarts or re

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Ralph Seichter via Postfix-users
* Viktor Dukhovni via Postfix-users: > The "post hooks" in certbot are not *reliable*. For the curious among you: I use dehydrated [1], which integrates nicely with my other automation, including Ansible [2]. An Ansible handler is used to restart the web server if certificates were updated, and t

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread mailmary--- via Postfix-users
I've said this in the past, certbot was badly coded, used too much memory and lacked vision. But there are two great alternatives, written as bash scripts (thats right.. bash scripts!) https://github.com/acmesh-official/acme.sh https://github.com/dehydrated-io/dehydrated give them a try, they

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Viktor Dukhovni via Postfix-users
On Sat, Apr 22, 2023 at 11:25:14AM -0400, Viktor Dukhovni via Postfix-users wrote: > On Sat, Apr 22, 2023 at 01:08:06PM +0200, Matus UHLAR - fantomas via > Postfix-users wrote: > > > >You should set a POST_HOOK in certbot renew (assuming you're using > > >certbot, that is) that restarts or relo

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Jim Popovitch via Postfix-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, 2023-04-22 at 11:25 -0400, Viktor Dukhovni via Postfix-users wrote: > On Sat, Apr 22, 2023 at 01:08:06PM +0200, Matus UHLAR - fantomas via > Postfix-users wrote: > > > > You should set a POST_HOOK in certbot renew (assuming you're using >

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Viktor Dukhovni via Postfix-users
On Sat, Apr 22, 2023 at 01:08:06PM +0200, Matus UHLAR - fantomas via Postfix-users wrote: > >You should set a POST_HOOK in certbot renew (assuming you're using > >certbot, that is) that restarts or reloads the web server. > > I guess this exactly what failed. The "post hooks" in certbot are no

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Matus UHLAR - fantomas via Postfix-users
* Peter Ajamian via Postfix-users: Verify return code: 10 (certificate has expired) On 22/04/23 22:18, Ralph Seichter via Postfix-users wrote: Thanks. For some reason, the web server had not been restarted after the last certificate update, which normally happens automatically. I just restart

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Peter via Postfix-users
On 22/04/23 22:18, Ralph Seichter via Postfix-users wrote: * Peter Ajamian via Postfix-users: Verify return code: 10 (certificate has expired) Thanks. For some reason, the web server had not been restarted after the last certificate update, which normally happens automatically. I just restart

[pfx] Re: www.postfix.org certificate expired

2023-04-22 Thread Ralph Seichter via Postfix-users
* Peter Ajamian via Postfix-users: > Verify return code: 10 (certificate has expired) Thanks. For some reason, the web server had not been restarted after the last certificate update, which normally happens automatically. I just restarted the server process manually. -Ralph _